{"action":"Upgrade org.infinispan:infinispan-core to 8.2.12.Final (8.x) or 9.4.17.Final (9.x) or later.","affected":[{"fixed":"8.2.12.Final","introduced":"0"},{"fixed":"9.4.17.Final","introduced":"9.0.0.Final"}],"component":"org.infinispan:infinispan-core","cve_ids":["CVE-2019-10174"],"ecosystem":"Maven","epss":0.03089,"exploited":false,"fixed_versions":["8.2.12.Final","9.4.17.Final"],"ghsa_id":"GHSA-h47x-2j37-fw5m","id":"tcs_01M5N8ZKHBKD875FM54TEZ0XMN","modified_at":"2024-02-20T05:34:46.685094Z","published_at":"2022-05-24T17:01:50Z","references":["https://osv.dev/vulnerability/GHSA-h47x-2j37-fw5m","https://nvd.nist.gov/vuln/detail/CVE-2019-10174","https://github.com/infinispan/infinispan/commit/5dbb05cfaca01a1a66732b82a0f5ba615ccbd214","https://github.com/infinispan/infinispan/commit/7bdc2822ccf79127a488130239c49a5e944e3ca2","https://access.redhat.com/errata/RHSA-2020:0481","https://access.redhat.com/errata/RHSA-2020:0727","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10174","https://github.com/infinispan/infinispan","https://security.netapp.com/advisory/ntap-20220210-0018"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h47x-2j37-fw5m","url":"https://osv.dev/vulnerability/GHSA-h47x-2j37-fw5m"}],"summary":"Use of Externally-Controlled Input to Select Classes or Code in Infinispan"}